This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5f399a11-963c-3c84-8c34-702853ad11e0.roa
File: 5f399a11-963c-3c84-8c34-702853ad11e0.roa (raw, json)
Hash identifier: 2kH9GE7Njt+gbaSZwaX7Bj3YmxH9Kq6vGczBX7G1eqI=
Subject key identifier: 85:33:F5:64:A7:48:78:7D:E7:6C:74:49:4A:B8:A7:C4:58:56:31:4F
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584C688C0EC9C59E51F1B45E9000
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5f399a11-963c-3c84-8c34-702853ad11e0.roa
Signing time: Sun 04 Jan 2026 02:00:30 +0000
ROA not before: Sun 04 Jan 2026 02:00:30 +0000
ROA not after: Sat 04 Apr 2026 01:00:30 +0000
asID: 398493
IP address blocks: 154.59.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Jan 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:68:8c:0e:c9:c5:9e:51:f1:b4:5e:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jan 4 02:00:30 2026 GMT
Not After : Apr 4 01:00:30 2026 GMT
Subject: CN=7ab8647d-2a50-412b-a8d4-83f5ef049be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:5c:dd:73:4f:f8:ac:47:f9:05:c9:ca:06:
6d:2e:64:0e:62:84:e4:b0:89:1c:e9:36:c6:1a:80:
75:9a:b2:56:43:84:76:9b:f0:1e:65:95:a7:cd:ad:
60:70:b2:dd:54:7a:de:b2:a3:bf:d3:0d:71:3a:44:
21:c2:65:9c:ab:cc:ba:93:9f:d7:72:36:00:51:7d:
60:53:56:b4:09:9e:29:53:da:aa:d3:fa:97:56:c8:
12:68:8b:88:62:5f:fd:49:c1:55:c4:a9:40:45:d7:
3c:1b:72:5f:a5:d4:60:23:7f:32:b2:be:0a:31:7b:
3f:17:98:90:8d:dc:c3:6a:a2:d5:fe:70:74:f3:39:
cb:21:29:e5:1b:ce:d9:af:9b:9e:49:e6:9e:a5:e5:
b4:64:b5:01:c5:c0:9c:2d:60:52:12:3b:92:14:21:
b0:97:23:bd:18:dc:21:59:aa:b4:bb:98:ab:f5:86:
f4:72:d5:93:3f:01:46:47:f9:bc:d3:59:39:ef:17:
62:b0:d4:46:98:f5:52:99:fc:db:6b:91:e5:b2:17:
aa:76:3b:fb:89:25:82:47:26:1b:6c:69:60:af:3a:
06:c8:34:ac:d3:a5:f6:e9:46:84:19:01:b1:d6:77:
04:c2:19:be:24:5d:80:0b:d7:33:cc:41:b4:92:ff:
dc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:33:F5:64:A7:48:78:7D:E7:6C:74:49:4A:B8:A7:C4:58:56:31:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5f399a11-963c-3c84-8c34-702853ad11e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
154.59.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:c1:a2:3c:98:fa:b3:03:92:67:5e:d2:d5:dc:09:a5:ac:27:
52:d9:15:af:24:80:1c:54:55:86:41:0d:37:d9:7d:17:8c:72:
24:76:90:f2:3b:ef:7f:ac:12:80:17:d1:bc:72:b4:78:71:e2:
97:5b:74:d2:4c:56:94:62:2e:be:f8:6c:3e:ee:72:94:06:e5:
67:19:ab:4b:3e:bd:c9:a4:ba:20:0e:77:09:f8:4d:8d:46:62:
62:b4:66:9f:94:e6:fe:6a:e7:4c:dd:20:02:8d:e9:ba:49:04:
e3:ff:09:49:a8:98:de:86:94:ef:90:9e:c7:7d:c4:dc:1c:ce:
d6:5c:03:3f:9b:4e:cf:aa:df:51:52:59:b5:c5:38:ec:4c:f2:
52:1a:89:e9:85:38:c8:72:7a:eb:73:5a:60:56:d6:f5:f2:a8:
01:d3:a4:59:9b:76:81:b6:48:c4:d1:bb:31:2e:e6:78:43:76:
4c:f3:b5:f9:ee:fa:8f:2b:2d:77:8e:89:e9:76:21:d4:04:f4:
5a:8e:69:c4:1e:1e:bc:90:c6:fa:0b:b3:12:07:12:2f:5f:45:
cf:62:1e:4e:c2:f8:82:e5:00:3f:0b:8d:48:98:da:fc:8b:08:
4c:e3:e0:b6:f5:1f:85:f2:f3:0e:d9:d0:43:fa:c3:a1:0c:ae:
e5:01:f7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:27:49 2026 by rpki-client